URLhaus Database

You are currently viewing the URLhaus database entry for https://anhung1102.vn/wp-admin/WvFADuUr/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:417750
URL: https://anhung1102.vn/wp-admin/WvFADuUr/
URL Status:Offline
Host: anhung1102.vn
Date added:2020-07-22 10:59:41 UTC
Last online:2020-07-22 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-22 11:00:03 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:3 hours, 2 minutes Good (down since 2020-07-22 14:02:07 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-22invoice-326_044797147.docdoc 47be8acdf14103a9c4f2b0e6b620ee5740669dd045e17a688e2480097be809b0Virustotal results 40.98% 
2020-07-22Inv-LGU54_7428999.docdoc 9f61c634155e4c4c25cda79ab4da536afe7bfeeb879754985ea6bb196ee0272dVirustotal results 38.33% Heodo
2020-07-22invoice_8_150906.docdoc 46f4bc23b97723b4e8c1acca6f9d425f7f832fb1ccd2c34c6e0b4cc8eaa4260dn/a Heodo
2020-07-22INVOICE-4606_1194378.docdoc c2e63ea82a2d878192098e0d4a0b6509bb986254ad2f252bb49475e86982ebf7Virustotal results 37.70% 
2020-07-22Invoice 7962_57007174.docdoc 2cb722c2b058a79fed6fba9442aa0b2d17c2460c71b9b3fd749b300772ce2c1bVirustotal results 35.00% Heodo
2020-07-22Invoice-AA4952_61787029.docdoc 8bf0f63918707260860836fd1bae7c3366cd110c8a1299c064475020d837311bn/a 
2020-07-22INVOICE-6_2143848.docdoc f58aa21cf6707dcc6eceb3fa977fa15325d0faab50dd9f08b2ea392c28658068n/a Heodo
2020-07-22INVOICE TYPK707_6739666.docdoc b7a4f4d8be523413a3c82837cdebb94f458ba431eef63244fba598a38afe6f98Virustotal results 30.65% 
2020-07-22INVOICE-KDM5205_587876.docdoc 9c36f76e927ccde32781becbf6a3a8ee5d2b843d19172105b9b9610680e3d82dn/a 
2020-07-22invoice-U620_849930.docdoc 7ff0263018fb67bcdd18c7b43f1b635db5983b85aabdefaf71b7d1e313f24fefVirustotal results 26.67% 
2020-07-22invoice-Q2208_068458116.docdoc a69ea13a804925a2c446c80a8a9ee6b20385313190c2a8f84083ee75dc3c961eVirustotal results 28.81% Heodo